Hacker News Reader

Comment by freedomben | Hacker News Reader

I don't go to many events, but the last one I went to was a concert, and the tickets required the app and could not be screenshotted or PDFed because there was some motion thing on the QR code to ensure that it wasn't a screenshot. It really pissed me off, but there's not much I can do about it other than boycott the show.

Someday, I'd like to try capturing an animated gif or short MP4 or something of the motion, and see if that works, but the pragmatic part of me overwhelmed the hacker side of me. I would hate to lose my money on the ticket and not be able to see the show because I tried to hack the process

View on HN

I'm wondering what the motion thing is even meant to address. Either a ticket is valid and used / not used or it's not a valid ticket. What about that requires a real-time motion thing?

I wonder if they want to prevent reselling or at least require that it goes through their app? (I think this is a bad thing for them to do, just trying to think of the motivation).

My guess is, you're right, it's to force your use of their app. for data harvesting reasons?

Could be that too.

The code is rolling so you can't use a screenshot to enter the show. This is to stop ticket transfers outside the system.

The ticket stub is animated so you can't use a simple screenshot to move to a better location once inside the show.

Human beings are checking those tickets, and movement is proof of liveness (and not a screenshot you and 25 friends are sharing). Many ticket checking systems are not connected to the internet and cannot/will not check if it's already been used. Many of the motion enabled codes are also basically working in the same way as 2FA codes: your ticket is given with a public key, usually unique to your device, and rotates every minute. Allows them to ensure that the ticket is up to date, not forged and signed properly.

The ones I've seen pretty clearly had some of the motion/change defined by the time. We're so fucked.

You do understand it there because people have been trying to pass of screenshots as the app right? This happened during Covid as well. The Danish Covid passport initially just had QR code, then people started selling screenshots on Facebook. Same with the drivers license, people tried to pass off screenshots as the actual drivers license app.

It's not hard to imagine that people would sell screenshots of QR code ticket online. So rather than accepting that we've created a system that is fundamentally flawed, companies try to pave over it with more and more features, instead of just providing physical tickets.

> [...] there was some motion thing on the QR code

Yep, same happened to me with some baseball game tickets. So incredibly dumb.

Even worse, we split into two groups and I had to ask the other group to download the app... create an account... and finally be able to "transfer" the tickets to them. It took like ten minutes, and thank god we weren't at the park yet trying to do all that. Ugh.

Reply on news.ycombinator.com